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I. INTRODUCTION 



Quantum key distribution (QKD) has now been extensively studied 

both theoretically and experimentally. In practice, if one uses an imperfect single-photon 
source with a lossy channel, the security is undermined by the photon- number-s plit ting 



attack 
14. 



15 



16|, 



9|. Fortunately, this can be managed by a number of methods 



13, 



18 



19 



201 1 ■ In particular, the so called ILM-GLLP proof 



10 



11 



, |5j has shown 

that if we know the upper bound of fraction of the multi-photon counts (or equivalently, the 
lower bound of single-photon counts) among all raw bits, we still have a way to distill the 
secure final key. Verifying such a bound is strongly non-trivial. The so called decoy-state 



method 



10 



11 



12 



13 



14| is to find out such bounds, say, among all those clicks at Bob's 



side, at least how many of them are due to the single-photon pulses from Alice. 

The main idea of the decoy-state method is to change intensities randomly among different 
values in sending out each pulses. Equivalently, we can regard pulses of different intensities 
as pulses from different sources. For example, in a 3-intensity protocol 12|, Alice has three 
sources, source Yq (vacuum source) which is supposed to produce vacuum only, source Y 
(decoy source) which is supposed to only produce state 

J 

k=0 

only, and source Y' (signal source) which is supposed to only produce state 



(1) 



(2) 



A;=0 



where \k) is the fc— photon Fock state and > 0, a'f. > for all fc, ^ = ^ a';, = 1. Here 
J can be either finite or infinite. Given a coherent-state source or a heralded single-photon 
source from the parametric down conversion, J = oo. 



The fundamental formula in the decoy-state method as first proposed by Hwang |ll[| is 
that the counting rates (yields) of pulses of the same photon-number states must be equal 
to each other even they are from different source, i.e. 



(3) 



where Sk and s'f. are counting rate of A;— photon pulses from the decoy source and counting 
rate of /c— photon pulses from the signal source, respectively. This is because of the obvious 



fact that those fc— photon pulses from different sources are actually randomly mixed therefore 
they are random samples of each other, 2/ sources Yq,Y,Y' are perfectly stable, i.e., they 
always produce a state precisely as the assumed one. Given Eq.Q, one can list simultaneous 



equations 12!] for Sk based Eqs.f lT]l21) and then find out the lower bound of Si {s[) which 
indicates the lower bound of single photon counts of the decoy source and signal source. 

Given this, one can calculate the final key rate of each source, by the well known result 
of ILM-GLLP0, 0]. For example, the asymptotic final key rate for the signal source can be 
calculated by 

Rs = A[[l-H{ti)]-H{t) (4) 

where ti, t are the QBER for single-photon counts of the signal source and the QBER for 
all counts of the signal pulses from the signal source. A'^ is the lower bound of the fraction 
of counts due to single photon pulses from the signal source. Moreover, the non-asymptotic 
unconditional secure key rate in a finite-size QKD is extensively studied recently, first in 



Ref. 



J], and then further studied in 



a. 



Recently, a number of QKD experiments using the decoy-state method have been done 
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23 



24 



251]. However, the story is not completed here because the existing decoy- 
state theory does not entirely cover the real experimental conditions in practice. No source 
in real-life can be perfectly stable. One important problem is the effect of source errors. 
Suppose in a protocol Alice sends out M pulses one by one. The actually produced state at 
any time i can differ from the assumed state that she wants. We call this discrepancy source 
error. Say, at any time i, Alice wants to prepare a state 

J 

k=0 

for Bob, but the source actually prepares a slightly different state 

J 

p. = 5^/fc#)(A;| (6) 

in the Fock space. We shall call such fki — fk source error, or state error, or parameter 
fluctuation. Most generally, the error, fki — fk is not random for different i. In practice, 
one of the major cause of the source error is the intensity fluctuation. Therefore we often 
use the term intensity fluctuation for the source errors. But our result here is not limited to 
the intensity fluctuation only. Here we consider a more general case that the parameters in 



the state fluctuate. Therefore we shall still use the term source error in stead of intensity 
fluctuation. 

If the source error is random, we can simply assume a perfectly stable source always 



emitting the averaged-stateQ, |26|] of all pulses from a certain source. As shown in Ref. 26j . 
we have to take a feed-forward control to each individual pulses in order to guarantee the 
randomness of source errors. If we use coherent light only, and if we have a stable two- value 
attenuator, we can use the method in Ref.|271] to manage any intensity fluctuations. 

If we don't assume any conditions above, the issue need to be studied more carefully. 
A very tricky point here is that the elementary assumption of Eq.(l3]) for the decoy-state 
method with stable sources is in general incorrect, if the state errors are not random. As we 



have shown explicitly|10l. |28|. there are cases that Eve. may know the source errors and she 
can violate Eq.Q by producing an instantaneous transmittance channel dependent on the 
errors. Therefore, we must seek a solution to the new problem. 

Very recently 281] . a general asymptotic theory for decoy-state QKD with source errors 



is presented. By the method [ 



we don't have to change anything in the existing set- 
up. The only thing we need is the bound values of a few parameters in the states from 
each source. However, that work has only presented the asymptotic result i.e., the effect 
of classical statistical fluctuation is not considered. Besides Ref. 28|, the problem is also 



studied studied 



29( 1 asymptotically from another viewpoint for the Plug-and-Play protocol. 



There 29|], Alice receives a pulse, attenuates it and sends it out for Bob. Eve controls both 
the incident pulse and the outcome pulse. Alice's transmittance 7 in doing attenuation can 
be either •y^ or 7"^, dependin g on whether she wants to prepare a decoy pulse or a signal 



pulse. Similar to Ref. [27|| , Ref. [29| also assumes that Alice can do the two- value attenuation 
exactly. The fundamental formula assumed there 13 is 

yD ^ yS 

m,n m,n 

where ^mnl^mn) is the counting rate of a decoy (signal) pulse which contains m photons 
when flying into Alice lab and contains n photons when flying away from Alice's lab, after 
Alice's attenuation. As was pointed out by the authors of Ref. the effects of the internal 
fluctuation of Alice's lab was not considered there and also the validity of elementary equa- 
tion = is not studiedjs^. Actually, as shown in the appendix of this work, the 
elementary equation does not always hold if there are fluctuations to Alice's attenuation. 



4 



Here in this paper, we stud y t he effects of both source errors and classical statistical 



fluctuations. The existing works 



28^, 



2^ have not included the effect of statistical fluctuations 



in calculating the final key rate, though the effect can be included in principle. Our earlier 
work assumes zero error for vacuum source Yq, here we shall assume errors in this source, 
besides errors in source Y and source Y'. Similar to the results in 28|, the results presented 



here only need the bound values of a few parameters in the states of different sources. 
In particular, in deriving the fraction of single-photon counts we don't use any unproven 
assumption and we don't need worry about the internal fluctuation of any Alice's device, 
since our method only needs the bound values of a few parameters in the source state. We 
don't need to presume any specific distribution for our states. In our study in this work, 
classical statistical fluctuation is considered by estimating the observed values from the 
asymptotic values with a fixed standard deviation. We shall start with a protocol with 
one-way quantum communication only. But as we point out in the end of this paper, our 
method obviously also applies to a Plug-and-Play protocol. 

This paper is arranged as the following. After the introduction above, we present our 
method with some important mathematical relations section II. We then present our main 
results in section III: the asymptotic and non-asymptotic formula for the fraction of single 
photon counts of the 3-intensity protocol with errors in states of all 3 sources. Some remarks 
on the source errors are addressed in section IV. The paper is ended with a concluding 
remark. 



II. OUR METHOD 

We assume that Alice sends M pulses to Bob one by one in the protocol. Each pulse 
sent out by Alice is randomly chosen from one of the 3 sources Yq, Y, Y' with constant 
probability po,P,p', respectively. Each source has errors. Clearly, pM, p'M and poM are 
just the number of the decoy pulses, the number of the signal pulses, and the number of 
pulses from the vacuum source, respectively. We assume we know the bounds of parameters 
in the states of each sources. 

Our goal is to find out the lower bound of the fraction of counts caused by those single- 
photon pulses for both the signal source and the decoy source. The following quantities are 
directly observed in the protocol therefore we regard them as known parameters: A^^, the 
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number of counts caused by the decoy source, Ns, the number of counts caused by the signal 
source, and A^o, the number of counts caused by the vacuum source, Yq. For our goal, we 
only need to formulate the number of counts caused by those single-photon pulses from each 
sources in terms of the known quantities NQ,Nfi,Ns and pQ,p,p' and the bound values of 
those parameters of states in each sources. 

A. Virtual protocol 

For clarity, we first consider a virtual protocol; 
Suppose Alice will send M pulses to Bob in the whole protocol. At any time i (z G [1, M]), 
each source produces a pulse. The states of the pulses from sources Yq, Y , Y' are 

J 

Poi = ^hi\k){k\, (7) 

fe=0 

J 

p. = ^aki\k){k\ ; and (8) 

fc=0 

J 

p[ = J2ai,\k){k\. (9) 

fe=0 

Here 6oj is a bit smaller than 1, and we assume 6q, lower bound of all boi is known in the 
protocol; pi and p[ are a bit different from p and p' of Eq.([Tl [2]), which are the assumed 
states in the perfect protocol where there is no source error. At any time i, only one pulse 
is selected and sent out for Bob. The probability of selecting the ith pulse source Yq, Y or 
Y' is constantly Pq, p, and p' for any i. The un-selected two pulses at each time will be 
discarded. After Bob has completed all measurements to the incident pulses, Alice checks 
the record about which pulse is selected at each time, i.e., which time has used which source. 
Obviously, Alice can decide which source to be used at each time in the very beginning. This 
is just then the real protocol of the decoy-state method. 

As shown below, based on this virtual protocol, we can formulate the number of counts 
from each source and therefore find the lower bound of the number of single-photon counts. 
The result also holds for the real protocol where Alice decides to use which sources at the 
ith time in the very beginning. 



6 



B. Some definitions 



Definition 1. In the protocol, Alice sends Bob M pulses, one by one. In response to 
Alice, Bob observes his detector for M times. As Bob's ^th observed result, Bob's detector 
can either click or not click. If the detector clicks in Bob's ^th observation, then we say that 
"the ith pulse from Alice has caused a count" . We disregard how the ith pulse may change 
after it is sent out. When we say that Alice's ith pulse has caused a count we only need 
Bob's detector clicks in Bob's ith observation. 

Given the source state in Eqs. flHllQl) . any ith pulse sent out by Alice must be in a photon- 
number state. To anyone outside Alice's lab, it looks as if that Alice only sends a photon 
number state at each single-shot: sometimes it's vacuum, sometimes it's a single-photon 
pulse, sometimes it is a A;— photon pulse, and so on. We shall make use of this fact that any 
individual pulse is in one Fock state. 

Definition 2. Set C and Ck'- Set C contains any pulse that has caused a count; set contains 
any A;— photon pulse that has caused a count. Mathematically speaking, the sufficient and 
necessary condition for i G C is that the ith pulse has caused a count. The sufficient and 
necessary condition for i G is that the ith pulse contains k photons and it has caused 
a count. For instance, if the photon number states of the first 10 pulses from Alice are 
|0), |0), |2), |0), |3), |2), |0), and the pulses of z = 2, 3, 5, 6, 9, 10 each has 
caused a count at Bob's side, then we have 

C = {i\i = 2, 3, 5, 6, 9, 10, ■ ■ ■}; Cq = {i\i = 2, 5, 10, ■ ■ ■}; Ci = {i\i = 3, 6, 9, • ■ ■}. (10) 

Clearly, C = cq U ci U C2 ■ ■ ■, every pulse in set C has caused a count. 

Definition 3. We use superscripts U, L for the upper bound and lower bound of a certain 
parameter. In particular, given any A; > in Eqs. (!71l8| [9l). we denote x^, for the minimum 
value and maximum value of {xki\ i G Ck}', and x = b,a, a'. We assume these bound values 
are known in the protocol. 

C. Some important relations and facts 

If the ith pulse is an element of Ck, the probability that it is from Yq, Y ot Y' is 



Pobki + paki + v'a'ki ' 

V = (11) 

Pobki + paki + P'o-ki 

We want to formulate the numbers of fc-photon counts caused by each sources. Given the 
definition of the set Cfc, this is equivalent to ask how many of pules in set Ck come from each 
sources. If the ith pulse contain k photons, it can come from any of the 3 sources, Y^^Y oi 
Y'. According to Eqs.(I7l El E]), if the ith pulse contains fc-photons, the probability that it 
comes from source Yq is 

^ bkiPo 

I vi\k 



Pobki + paki + P'a'j^^ 



Or, equivalently, 

^ko = 'Pvi\k- 

Given a finite number of pulses and counts, this equation should be replaced by the 
expectation-value equation as 

J 

fc=o iecfc 

This is the expected number of counts caused by source Yq, since every pulse in {ck} has 
caused a count. Therefore we can formulate the expected value of the number of counts 
caused by source Yq by 

{No) = bkiPodki = {Nq) + E E bkiPodki (13) 

fc=0 iGCfc k=l iSCfc 

Here 

= , ^ ^ ^ . . • (14) 

Pobki + paki + pa'i^i 

Nq is the number of counts due to pulses from source Yq, Nq = po Xlieco boidoi is the number 
of counts due to those vacuum pulses from source Yq- Similarly, if the ith pulse contains 
k photons, it has a probability Vdiik = p^h^.+pal'.+p^a' from the decoy source, and a 

p'a' 

probability of VsHk = — i — ^ — to be from the signal source. Therefore we have 

^ ^^'^ Pobki+pa.ki+P a'^i 

{nkd) = ^Vdiik = ^pakidki, (15) 

for the expected number of counts caused by those /c-photon pulses from the decoy source, 
and 

Ks) = ^'Psi\k = ^p'a'i^^dki, (16) 



for the expected number of counts caused by those fc-photon pulses from the signal source. 
Therefore, besides Eq.f llSp we also have the following 2 equations for (Nd) and (A^^) as the 
expected values of the number of counts due to the decoy pulses and signal pulses: 

J J 
{Nd) = XlXl '^'^^l*^ ^P^^ (-^"^^ 

J J 
fc=0 i€Cfc fc=0 iSCfc 

Here we have used Eqs.flTSl flGll . 
For simplicity, we define 

Recall Eqs. (ll6lll5p . (wq^), {riQd) are the expected number of pulses from the decoy source 
and signal source in set cq. 

Based on the formulas and definitions above, we find the following important facts: 
Fact 1: 

pa^Do > {nod) > pa^Do; p'a'^D^ > {n'J > p'a'^D^. (20) 

This is directly deduced from Eqs. fll5lll6p . 

Fact 2: 

^>D„> i, ,,,, ( {N„} - P°"-''°>(iV,)'l . (21) 

Proof. Obviously, 

{No) 
boPo 

On the other hand, since any b^i < 1, 

J J 
PoDo > (iVo) - E E ^'^'^'^^ ^ (^o) -PoJ2^k Dk (23) 

k=l iecfc k=l 

To lower bound Dq, we only need upper bound po J2k=i ^k^k- By Eq.l ITTl) we know 

J 

pJ2a^kDk<{Nd)-{nod) (24) 

k=l 

which is equivalent to say 

Po 



Do < (22) 



^E4^fc<^(W-K.)) (25) 



We assume 



4 > 



This condition can obviously hold if each pulses of source Iq is in an extremely weak coherent 
state. These conditions mean 



< 



k=l 



k=l 



Therefore, based on Eq. fl23ll25p we have 

PoDo > {No) - ^ ((iV,) - (no.)) > (iVo) - ^^^i^ ((iV,) - {no,)) 
pa^ pa^ 

Combining fact 1 with Eq. (l28|) . we obtain the following important formula 



Po - 

This completes the proof of fact 2. 
Fact 3: 



pa{ 



a'2HNd)/p - a^{Ns)/p' - {a'M ' (^2<) Do 



^1 ^2 ^1 ^2 



Proof. The startpoint of our proof is Eqs. ffTTl [T8|) which can be rewritten into 

{Nd) = {nod) + pa^Di + pA - 



(27) 



(28) 



(29) 



(30) 



(31) 
(32) 



where 



and 



^2=P' 



J J 

k=2 i&Cf^ k=2 i€Cfe 



i^Di + A - I X] '^i*'^!* + X] akidki 

\ieci k=2 i€Ck 

J 

J2 <du + ""'kidki - {4Di + A') 

,jSci k=2 idCf^ 



> 



> 



According to the definition of A and A', we also have 

-A + 6 



IL 

A' = ^ 
a'i 



(33) 



(34) 
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and 



6 = A'-lrA 

^2 



(35) 



Further, we assume the important condition 




(36) 



The first inequahty above leads to 



e3>0 



(37) 



as one may easily prove. With Eq. (lMll . Eq. (1521) is converted to 



(Ns) = {n'J + p'afD, + p'^A + 6 + p'i. 



(38) 



Given the Eqs.(ET| [55]) . we can formulate Di. 




(39) 



Since ^1,^2, and ^3 are all non-negative, and a}(a'2 — a^aJ^ > by the second inequality of 
Eq.f l36l) . we now have 



Here we have used Fact 1 for the bound values of {riod), (^os)- ^o minimize Di, we have 
replaced (nod) by its upper bound and {n'^^) by its lower bound as given in Fact 1. This 
completes the proof of fact 3. 

III. MAIN RESULTS 
A. Asymptotic result 

Given Fact 3, the minimum value of the number of counts caused by single-photon pulses 
from the signal-source (or the decoy-source) is simply 




(40) 



= p'a['^D^ < (n;,), (or {n,,)"^ = pa[D^ < {n,a)). 



(41) 
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Therefore, we can now bound the fraction of single photon counts among all counts caused 
by the signal source 



{Ns) (iV,)(aX^-a'M^ • ^^^^ 



Here the range of Dq is given by fact 2 in the earlier subsection. We don't have to replace Dq 
by its largest possible value to obtain the smallest possible A'^^ at this moment. Instead, we 
shall do numerical calculation by Eq. (jlj) with all possible values of Do in the range given by 
fact 2 and find the worst case result directly to the key rate. Define S' = as the counting 
rate of the signal source, S = as the counting rate of the decoy source, 5*0 = as the 
counting rate of source Yq, and M is the total number of pulses as defined earlier, we can 
write the right-hand-side of the inequality in term of counting rates: 



Similarly, we also have 



A, > ' -±- " ^ " ' ' (AA\ 

' - S {a'laf - Q!la\) ^ ' 

for the minimum value of fraction of single-photon counts for the decoy source. 

Eqs. fj42| l43l |44|) and conditions of Eq. fl26|36l) are the asymptotic results of this work. 



B. Non-asymptotic results 

Strictly speaking, Eqs. lHTl [30l) cannot be used in a real experiment where the number of 
pulses are always finite. Therefore, in any real experiment we have to consider the effect of 
statistical fluctuation besides the effect of source errors. 

First, {n'^s)^ — p'd'iDi > p'a'^V^ in the formulas is the lower bound of the expected 
number of single photon counts of the signal source, but we actually need the lower bound 
of n[g, the (deduced) observed value (i.e., the true value) of the number single photon counts 
of the signal source in a certain experiment. Of course, given the expectation value, {n[^)^, 
one can deduce the lower bound n'j^ of the experimental value n[g by classical statistics: 

<>n;i = K)-5i. (45) 
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To be sure that this bound is correct with a probabihty exponential close to 1, we need set 
6i considerably large, e.g., 

(5i = 10 /kJ. (46) 

Here 10 standard deviation is chosen simply for convenience rather than a exact cut off point. 
As shown in Ref. 12|, the probability that the statistical fluctuation exceeds this range is 
exponentially close to 0. 

Second, in the right hand side of Eq. (l30|) . there are many parameters of expectation values 
such as (Nd), (Ns), (nod), ('^os)' which are not observed values in one specific experiment. 
We need to replace these parameters by the experimentally observed quantities to make the 
formula useful. Again, this can be done by using classical statistics. This is to say, we need 
consider the largest possible difference between the expectation values and the observed 
values due to the statistic fluctuations. 

For clarity, we shall use {() for the statistical expectation value of observable and ( for 
the true value or the observed value in the experiment. For example, we shall use {riid) for 
the expectation value of the number of counts at Bob's side due to the single-photon pulses 
from the decoy source at Alice's side. We shall also use the superscript f/ or L to indicate 
the maximum value or minimum value of certain variable. With the following condition, 

Vviik + Vdi\k + Vsi\k = 1, if ^ e Cfc (47) 

for any A;, we can now start to derive our non-asymptotic result. By classical statistics we 
know that there exists a real number 5d satisfying 

Nd = {Nd) + 6d (48) 

with a probability exponentially close to 1 if we set 



\Sd\ < = 10 ~ 10 VA^. (49) 

This indicates that 

{Nd) = Nd-6d (50) 

with a probability exponentially close to 1 that 6d is in the range given by Eq.( l49l) . Also, 
there exists a real number 6o satisfying 

(A^o) = No-6o (51) 
13 



and \So\ < lOv^. 

In our problem, due to the constraint given in Eq. (H7|) . the fluctuations of each variables 
are not independent. This can help us not to overestimate the effects of the fluctuations too 
much. Eq. (H71) immediately leads to the following identity: 

{Ns) + {Na) + {No) = N, + N, + No. (52) 

This is to say, the total population in set C is fixed, but there could be fluctuation in the 
population distribution over sources Yo,Y,Y'. Eq.( l52i) . together with Eq.( l50i) and Eq. (l5T|l 
leads to 

(iV,) = N,-6d- 60. (53) 

We use 

n'u > < = - 10V(^. (54) 

This is the inequality for the experimental lower bound of the number of single-photon 
counts from decoy pulses, where 

, , ,L : ,L^L ^ V'^t K^(iVd)/P - a2^(iVs)/p^ - (4^ao^ - a'i^) (^0)] ,,,, 

K.) =P«l^l> u,L _ „,L„V (55) 

1 2 1 2 

and (Ai'rf), (A^s) are defined by Eqs. fl5U|53l) . The range of (Dq) is given by Fact 2 where the 
range of (-Do) is given by Eq.f lSlI) . To have the lower bound value of n'^^ in Eq.( l54l) , we only 
need put the smallest value of (A^^^^) and largest possible values of {Ng), {Dq) into Eq. fl55l) . 
However, we don't have use the largest possible value of (-Do)) because we only need the 
worst-case result of the final key rate, rather than the worst-case result in each steps. 

According to these we can lower bound the fraction of single-photon counts of the raw 
bits caused by signal pulses through equation: 

a; > I (56) 

where n[g is defined in Eq. flM|) and the ranges of related variables in Eq. flMl) can be calculated 
by Eq. fl55]l5n]l5T]l53D and Fact 2, if conditions of Eq. fl26]l36l) hold. 

For coherent states, if the intensity is bounded by [fi^, for the decoy pulses and 
[fi'^,fi'^] for the signal pulses then 

= (/i^)^e-^''/A;!, af = (/x'^)'=e-'^"'/A;! (57) 
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with X = L, U and k = 1,2 and 

= e-^\ = e"^^ ; a'^ = e-^'\ a'^^ = e~^" (58) 

Note that our resuh is not hmited to a coherent state source. To calculate the unconditionally 
secure final key rate, one has to combine our result fea. fl56l) ') with the existing theory of 

nnti 

finite-size QKD|^, |6|, |7l]. Here we make a loose treatment to show the effects of our Eq. (15B]) 
to the ket rate by adding statistical fluctuation to t and ti in Eq.(jl]). Detailed numerical 
results using the experimental data of QKD over 102.7 kilometers calculated by our formula 
is listed in table I. We treat the experimental data in the following way for key rate of the 
signal pulses by Eq.(j4]): can be calculated by Eq.( !56|) as stated earlier. (2) Half of the 

experimental data of signal pulses should be discarded due to the measurement basis mis- 
match in the BB84 protocol. (3) Among the remaining half, a quarter of them are consumed 
for the bit-flip test and another quarter of them are consumed for the phase-flip test. (4) We 
use to = toifJ'') = 3.580% as the observed value of both bit-flip rate and phase-flip rate. The 
flnal key is distilled from the remaining bits of signal pulses. The number of the remaining 
bits is not less than n'is/4: . We use t = to{fi') for the bit-flip rate, and 

h = t[ + 10V4tl/<. (59) 



and h[g is given by Eq. (lM|) . t[ is 



, _ p' ail- Do 
''0 2N' 



t'l = ^f^. (60) 

We then put all possible values of Dq into Eq.(j3]) according to Fact 2 and Eq. flFT]) for the 
worst-case result of key rate over Dq. 



The detailed experimental parameters can be founded in Ref. 2^. For completeness, we 
list the main parameters here in table II: 



IV. SOME REMARKS ON THE SOURCE ERRORS 

By the existing technology, one can indeed use whatever stabilizer to reduce the source 
errors considerably. Even with this fact, our theoretical results are still necessary: First, 
no technology can guarantee a perfectly stable source. It is also questionable whether any 
existing device has been proven to be able to reduce the source errors to a low level which 

15 



TABLE I: Secure key rate (final bits per pulse in the unit of 10 ^) vs intensity error upper bound 



221. The first row lists different values of 



using the experimental data in the case of 102.7 km 
upper bounds of intensity errors, 5m, i-e., when we want an intensity x, we can actually create a 
pulse of any intensity in the range [x{l — 5m), 2;(1 + (5m)]- Other rows list the final key rates, which 
are the numbers of final bits per signal pulse after error test, i.e., ^ where Ns is the number of 
raw bits of signal pulses after error test, ?^/ is the number of final bits distilled from these Ns raw 
bits. R is the asymptotic key rate, Ri, R2, R3 are the non-asymptotic key rates with the intensity 
of each pulses in Yq being bounded by 0, 0.5%, 1%, respectively. The intensity fluctuations of any 
decoy-pulse and signal pulses are bounded by 5m- In the table we have given the results of key 
rate while 5m ranges from to 3%. 



5m 


3% 


2.5% 


2% 


1.5% 


1% 


0.5% 





R (in 10"^) 


11.03 


12.09 


13.15 


14.19 


15.23 


16.26 


17.28 


Ri (in 10-6) 


1.536 


2.567 


3.591 


4.607 


5.616 


6.618 


7.614 


R2 (in 10-6) 


1.506 


2.537 


3.561 


4.577 


5.587 


6.589 


7.585 


R3 (in 10-6) 


1.475 


2.507 


3.531 


4.548 


5.557 


6.560 


7.556 



TABLE IL Main parameters and observed results in the experiment of Ref 2^]. M : total pulses 
sent out by Alice during the experimental time. to(/^)) ^o(/^')- quantum bit error rates (QBER) of 
decoy pulses and signal pulses. S',S,So: counting rates of the signal pulses, decoy pulses and Yq 
pulses. 

From the results listed in table I, we find that the effects of source errors to the key rate is not 
significant (provided that the source error is not too large.) For example, in the asymptotic case 
(results in the first row), if the largest intensity fluctuation is controlled to be less than 0.5%, the 
key rate is decreased 17.28 Hz(the data in the last column of the first row ) to 16.26 Hz only(the 

data in the second column from the right of the first row). However, the statistical fluctuation 



22( 1 . If we strictly considered the 



decrease the key rate significantly, given the existing experiment 

finite-size effect 4, ^, 7|, the key rate would be further decreased. To reduce the effects, one can 







increase 


the number of pulses in the set-up. 








M 


io(Ai') 




c' c c 


P' 


P 


Po 


5.222 X 10^ 


3.580% 


9.098% 


1.262 X 10"^ 4.611 X 10-^ 6.711 x 10"^ 


0.5 


0.4 


0.1 
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is exponentially close to 0. If unconditional security is our goal in practice, we must show 
quantitatively the effects of any polynomially imperfections. For example, even we can 
control the intensity fluctuation to be less than 0.5%, we had better still consider the effects 
of intensity fluctuation quantitatively rather than simply trust that the effects are negligible 
by intuition. Otherwise, one may ask why the cut off point is 0.5% rather than 0.0001% or 
25% ? The security is then standardless. If we disregard the effect of source errors, possibly 
we shall encounter the following ridiculous story: Set-up A produces a key rate of Ik/s with 
source errors of less than 0.5%, set-up B produces a key rate of 20k/s with source errors 
of 25% over the same distance. Do we have to believe that set-up B is better ? With our 
theoretical results, such type of issue is immediately resolved because we can calculate the 
net final key rate after considering the effects of source errors. Second, with our theoretical 
results, we don't have to blindly take too much costs in improving the source quality. For 
example, with our results we now know with strict proof that source intensity fluctuation 
less than 0.0001% is not so necessary, since it only improves the key rate negligibly, if we 



can already control the errors less than 0.5%. Fina. 



ly, there are cases Eve. can indeed know 



28| . in such cases Eve. can then violates 



the intensity errors[28|. As explicitly shown in|lOl. 
Eqs.Q through producing a time-dependent channel transmittance. The situation of the 
Plug-and-Play is even more serious: Eve. can actually prepare the error of each pulse then 
she can violate Eq.Q for sure. 

V. CONCLUDING REMARK AND DISCUSSIONS 

In summary, we have shown how to calculate the lower bound of the fraction of single- 
photon counts in the decoy-state quantum key distribution with both source errors and 
statistical fluctuations. By our method, all imperfections have been taken into consideration 
in the largest possible errors of a few parameters of the source states in the photon number 
space. Therefore we only need to know the bound values of a few parameters of sources 
instead of assuming exact values of any physical quantity. For example, we don't have to 



assume zero internal fluctuation of of Alice's attenuation as assumed by earlier works [2 7 



29| 



Obviously, our result here directly applies to the so called Plug-and-Play protocol first 



proposed by Gisin et ai. As pointed out in Ref 



31 



32|, the so called P 



can be made secure if the attenuation factors can be accurately set 29 



_ug-and-Play protocol 



331]. However, in 
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the Plug-and-Play protocol, Eve. actually knows the error of each individual pulse hence 
both the error-free decoy-state theory based on Eq.([3]) fails. Also, as shown in the appendix, 
if the attenuation factors cannot be set accurately, the result of Ref. [29(1 also fails but our 
theory here works. 

Also, in a Plug-and-Play protocol, Alice receives strong pulses from Bob and she needs 
to guarantee the exact intensity of the pulse sending to Bob. It is not difficult to check the 
intensity, but difficult to precisely correct the intensity of each individual pulses. Our theory 
here can help to make it easier 28|]: Alice monitors each pulses. She may either choose to do 
crude corrections to the pulses or not do any corrections: She simply discards those pulses 
whose intensity errors are too large (e.g., beyond 2%), and then use our theory to distill the 
final key. 

It should be interesting to combine our result with the existing theories on final key 
distillation in a finite size qkdQ, |6|, |7t| for the unconditional final key rate in the finite-size 
decoy state QKD with an unstable source. 
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VI. APPENDIX 



Here we show that the elementary assumption = „ used in Ref. 29(]is incorrect if 
the actively controlled attenuation factor is not stable. (Ref. 29| assumes a stable attenuation 
controlled actively.) For simplicity, we consider those pulses containing 10 photons when 
fiying into Alice's lab and after Alice's attenuation, containing 1 photon when fiying away 
from Alice's lab to Bob. Alice decides to randomly use her transmittance A = = 0.01 
to produce a decoy pulse and A = A'^ = 0.05 to produce a signal pulse. However, due to 
whatever un-controlled cause, there are internal fiuctuations of A value at different times. 
Consider the following specific case: to some blocks of pulses (we call these blocks strong 
blocks), to all decoy pulses and signal pulses, the real transmittance is a bit larger than 
A, the value that Alice wants, while in some other blocks (we call weak blocks) the real 
transmittance is a bit smaller than A. Suppose the number of pulses in the strong blocks 
and that in the weak blocks are equal. In the strong blocks, Alice's real transmittance 
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for a decoy pulse or a signal pulse is A^"*" = I.OIA^ or A"^"*" = I.OIA^ while in the weak 
blocks, Alice's real transmittance for a decoy pulse or a signal pulse is A^~ = 0.99A^ or 
A^- = 0.99A^. Suppose every block contains millions of pulses therefore Eve can know 
whether a block is a strong block or a weak block by observe the averaged intensity of pulses 
in the block. This is to say, Eve can treat different blocks differently. Eve produces a channel 
transmittance of rj^ to each pulses in the strong blocks and another transmittance ?7~ to 
each pulses in weak pulses. Note that here Eve does not know which pulses are decoy pulses 
and which pulses are signal pulses. She treats all pulses in one block fixed way. Now we can 
directly calculate and Yf^i. 



Y 



o A^+(l - A^+)9r/+ + A^-(l - A^-) V 1-01(1 - I.OIA^) V + 0.99(1 - 0.99A^)V 



A^+(l-A^+)9 + A^-(l-A^-)9 1.01(1 -1.01A^)9 + 0.99(1 - 0.99A^)9 

(61) 

s _ A^+(l - A^+) V + A^"(l - X^-frj- _ 1.01(1 - I.OIA^) V + 0.99(1 - 0.99A^) V 

J 1 



AS+(l-A^+)9 + A^-(l- A^-)9 1.01(1 -1.01AS)9 + 0.99(1 - 0.99A^)9 

(62) 

It's easy to see that in general Y^^ ^ Y^q ^ii t]^ ^ t]^ . For example, given that r]^ = 5r]^, 
numerical calculation shows that 

> 1.0025 (63) 

^10,1 

This counter example shows that in general the assumption = is incorrect if 

Alice's transmittance is not exactly controlled. We have demonstrated this fact with a pulse 
containing 10 photons, one can also consider a pulse containing 10^ photons and shall find 
very similar result: Eve. can make Y^r ^ si gnif icantly different from Yf^T ^. This has clearly 
broken the elementary assumption used in 29|. Obviously, such a case is equivalent to say 
that the pulse intensity from Alice is inexact, this is just the case we have studied in 28|. 
As was clearly shown there and also in|lo!]. Eve can produce different transmittance for the 
single-photon state from the decoy source and the signal source. If Alice can control the 
attenuation exactly, i.e., A^, A"^, there exists more efficient way to manage the issue in the 



protocol of one-way quantum communication 



27]. 
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